From: deraadt <deraadt@openbsd.org>
Date: Sat, 18 Sep 2021 16:45:07 +0000 (+0000)
Subject: freezero() instead of free(), because the object may contain a password
X-Git-Url: http://artulab.com/gitweb/?a=commitdiff_plain;h=6c3f70dd59dc16409aea52e74376d1efd3128e8a;p=openbsd

freezero() instead of free(), because the object may contain a password
ok tobhe
---

diff --git a/sbin/iked/config.c b/sbin/iked/config.c
index 029ee2b5813..87047a1f326 100644
--- a/sbin/iked/config.c
+++ b/sbin/iked/config.c
@@ -1,4 +1,4 @@
-/*	$OpenBSD: config.c,v 1.80 2021/09/01 15:30:06 tobhe Exp $	*/
+/*	$OpenBSD: config.c,v 1.81 2021/09/18 16:45:07 deraadt Exp $	*/
 
 /*
  * Copyright (c) 2019 Tobias Heider <tobias.heider@stusta.de>
@@ -455,7 +455,7 @@ config_new_user(struct iked *env, struct iked_user *new)
 		memcpy(old->usr_pass, new->usr_pass, IKED_PASSWORD_SIZE);
 
 		log_debug("%s: updating user %s", __func__, usr->usr_name);
-		free(usr);
+		freezero(usr, sizeof *usr);
 
 		return (old);
 	}